[foxbarrington]

I tried to use Charles on Robin Hood, but it looks like they use cert pinning to prevent it.

[mdaniel]

It reminds me of the expression "locks are to keep honest people out," in that code which runs on a device you control is code that you control: https://github.com/shroudedcode/apk-mitm#readme

[animuchan]

[Frida](https://frida.re/) is fantastic for de-pinning certs in applications. Can be fiddly, but when it works, it just works™.

[danielvaughn]

yeah I'm sure it's much harder today. I did this work like 8 or 9 years ago and I think fewer controls were in place at the time.